Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e37302e302f32342d3234203d3e20313336373837.roa
File:                     3135352e3133332e37302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          wFCqzf3U6NaYP9ag8xiMfrN1KzvfJlNCts+1O55d7xY=
Subject key identifier:   97:06:D7:E7:8C:B0:F8:4D:59:97:A9:BF:D3:35:94:7A:98:81:86:52
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       7ED2B5C1C84904FFED3BCEA100F2FD267C59457E
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e37302e302f32342d3234203d3e20313336373837.roa
Signing time:             Sat 22 Oct 2022 04:34:24 +0000
ROA not before:           Sat 22 Oct 2022 04:29:24 +0000
ROA not after:            Sat 21 Oct 2023 04:34:24 +0000
asID:                     136787
IP address blocks:        155.133.70.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d2:b5:c1:c8:49:04:ff:ed:3b:ce:a1:00:f2:fd:26:7c:59:45:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:24 2022 GMT
            Not After : Oct 21 04:34:24 2023 GMT
        Subject: CN=9706D7E78CB0F84D5997A9BFD335947A98818652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:67:0e:00:83:8c:d4:43:8d:f8:5a:2f:46:d9:
                    90:88:61:38:61:31:70:37:ef:25:c6:9e:77:52:63:
                    a2:a8:da:ff:cc:45:96:84:04:72:1f:37:4e:2b:eb:
                    56:60:2d:8b:17:03:6c:0a:b8:9b:be:b2:14:95:a7:
                    de:6c:96:09:c6:14:dd:ac:8b:40:7f:cf:6c:45:da:
                    bd:5f:0a:0a:cc:82:4c:33:2a:2d:33:c3:a8:68:6e:
                    4d:c6:85:9f:a5:a4:d3:3c:91:fb:46:3e:94:b2:72:
                    ff:7f:5f:56:3c:c6:0a:e9:4c:85:58:b6:37:bc:15:
                    9b:7f:8f:83:e2:0e:ee:47:88:e4:37:0c:9d:1e:e3:
                    df:de:8f:ea:55:12:c4:9a:70:3f:04:bb:85:5f:e1:
                    29:38:2b:0b:b9:30:be:30:87:98:8b:29:0a:e4:33:
                    cf:64:57:88:2c:51:a9:dc:7b:c2:40:70:65:63:64:
                    90:3b:cc:39:4b:af:fa:0a:0c:d1:6b:0a:25:f9:6e:
                    31:a0:74:b6:3c:c6:bb:bd:e3:4e:10:58:4b:92:56:
                    9a:0d:bb:e2:99:fc:f3:de:07:46:48:51:08:57:31:
                    58:89:ec:07:15:c9:2c:13:03:8c:ef:65:0e:74:c4:
                    72:ea:7d:63:54:a7:53:a4:e7:82:a8:75:0c:ed:d3:
                    3a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:06:D7:E7:8C:B0:F8:4D:59:97:A9:BF:D3:35:94:7A:98:81:86:52
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e37302e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.133.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:95:1b:8d:b4:a6:d7:86:8b:75:09:70:20:39:81:44:a6:2e:
         a8:e5:b5:8a:c2:87:c7:a0:51:29:f9:f3:51:67:ea:f5:fb:fe:
         85:4b:9b:02:4c:26:9d:ac:a9:5d:21:76:90:af:d6:f3:dd:eb:
         b7:ed:f0:dd:7a:43:60:d5:0c:1e:91:bb:bf:84:06:15:2c:7b:
         10:fb:7c:fb:f1:8c:2a:4b:06:89:60:b5:68:dc:ce:b8:8f:5d:
         71:9b:ca:55:03:f6:42:ca:35:88:f9:0e:fe:a2:0b:fb:aa:44:
         e5:ec:cb:5d:46:b5:03:5e:9f:8a:a8:8e:19:da:0a:ff:ef:31:
         49:ca:e0:08:d4:dd:7b:d1:e9:0a:69:e2:95:05:f5:29:35:d0:
         f3:c4:3f:eb:f8:25:37:1e:d6:9d:a2:10:a4:09:22:4e:b5:78:
         2b:45:f5:62:ab:a7:b0:03:2e:a8:30:11:61:2b:0c:fd:4f:83:
         2c:b4:03:e2:e4:ec:e5:5d:d9:6c:a9:9c:52:1e:f5:29:6a:70:
         f6:7c:d9:90:da:1c:e2:b1:45:4b:7f:bf:ae:d9:75:9b:3a:30:
         ab:05:e9:b6:ad:d2:5c:ec:15:4c:7c:ba:a1:76:6f:8f:f1:f5:
         38:82:80:4d:8d:6a:38:d7:9d:0d:92:05:0e:8f:c5:a5:7c:b7:
         30:fc:eb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net